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. Suppose an oracle is known to hold one of a given set of D two-valued 

functions. To successfully identify which function the oracle holds with k 
Q_i| classical queries, it must be the case that D is at most 2 k . In this paper we 

derive a bound for how many functions can be distinguished with k quantum 
j3 ■ queries. 
3 ' 

cr. 

I. INTRODUCTION 

X 

Quantum computers can solve certain oracular problems with fewer queries of the oracle 
than are required classically. For example, Grover's algorithm [jl| for unstructured search 
can be viewed as distinguishing between the N functions 

where both x and j run from 1 to N. Identifying which of these N functions the oracle holds 
requires of order N queries classically, whereas quantum mechanically this can be done with 
of order quantum queries. 

The N functions in ([!]) are a subset of the 2 N functions 

F:{l,2,...,iV}-{-l,l}. (2) 

All 2 N functions of this form can be distinguished with N queries so the iV functions in (p are 
particularly hard to distinguish classically. No more than 2 k functions can be distinguished 
with only k classical queries, since each query has only two possible results. Note that this 
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classical "information" bound of 2 k does not depend on N, the size of the domain of the 
functions. 

Quantum mechanically the 2 k information bound does not hold 0. In this paper we 
derive an upper bound for the number of functions that can be distinguished with k quantum 
queries. If there is a set of D functions of the form (|2]) that can be distinguished with k 
quantum queries, we show that 

D<l + (?) + (?)+- + (J). P) 

If the probability of successfully identifying which function the oracle holds is only required 
to be p for each of the D functions, then 

0<l[l + (?) + (?) + -+(?)] ■ (4) 

We also give two examples of sets of D functions (and values of k and p) where (|3]) and 
(U) are equalities. In these cases the quantum algorithms succeed with fewer queries than 
the best corresponding classical algorithms. One of these examples shows that van Dam's 
algorithm |4| distinguishing all 2 N functions with high probability after N/2+0(^/N) queries 
is best possible, answering a question posed in his paper. We also give an example showing 
that the bound (|3|) is not always tight. 

An interesting consequence of (§) is a lower bound on the number of quantum queries 
needed to sort n items in the comparison model. Here, we have D = n\ functions, corre- 
sponding to the n! possible orderings, to be distinguished. The domain of these functions is 
the set of iV = (™) pairs of items. If k — (1 — e)n, the bound (|3|) is violated for e > and n 
large, as is easily checked. Hence, for any e > and n sufficiently large, n items cannot be 
sorted with (1 — e)n quantum queries. 



II. MAIN RESULT 

Given an oracle associated with any function F of the form (|2|), a quantum query is an 
application of the unitary operator, F, defined by 

F \x,q,w) — \x,q ■ F(x),w) (5) 

where x runs from 1 to N, q = ±1, and w indexes the work space. A quantum algorithm that 
makes k queries starts with an initial state \s) and alternately applies F and F-independent 
unitary operators, Vi, producing 

\1> F ) = V k FV k - 1 ---V 1 F\ a ) . (6) 

Suppose that the oracle holds one of the D functions Fx, F 2 , . . . , Fd, all of the form (|J). 
If the oracle holds Fj, then the final state of the algorithm is \if)Fj), but we do not (yet) 
know what j is. To identify j we divide the Hilbert space into D orthogonal subspaces 
with corresponding projectors Px,P2, ■ ■ ■ ,Pd- We then make simultaneous measurements 
corresponding to this commuting set of projectors. One and only one of these measurements 
yields a 1. If the 1 is associated with Pi we announce that the oracle holds Ft. 
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Following [||], if the oracle holds F, so that the state before the measurement was 
given by @, we know that for each £, \\P£\ip F )\\ 2 is a 2/c-degree polynomial in the values 
F(l), F(2), F(N). More precisely, 
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Pi\1>f) = £Q fr (F(l),...,F(iV)) 



r=l 



(7) 



where each Q# r is a k-th degree multilinear polynomial and me is the dimension of the £-th 
subspace. Note that formula (0) holds for any F whether or not F = Fj for some j. The 
algorithm succeeds, with probability at least p, if for each j — 1, . . . , D, we have 



r=l 



> 



V ■ 



(8) 



We now prove the following lemma: Let F be any one of the functions of form (0). If Q 
is a polynomial of degree at most k such that 



Q(F (1),...,F (AO) 



1 



then 



£|q(f(i),...,f(ao) 

F 



)A' 



> 



(9) 



(10) 



where the sum is over all 2^ functions of the form (fj). Proof: Without loss of generality we 
can take F (l) = F (2) = • • • = F (iV) = 1. Now 



Q (F(l), . . . , F(N)) = a + Y, a x F(x) + £ a xy F(x)F(y) 

x %<y 



(11) 



where the last term has k factors of F and the coefficients are complex numbers. Note that 

]T F( Xl )F(x 2 ) ■ ■ ■ F(x g )F( yi ) ■ ■ ■ F(y h ) = (12) 



as long as the sets {x±, . . . , x g } and {yi, . . . , yh} are not equal and x±, . . . , x g are distinct, as 
are yi, . . . , y^. This means that 



Y\Q{F{i),...,F{N)) 

F 

Now (|^) with Fq(x) = 1 means 



ao\ 2 + \ a x\ 2 + H \ a xy\ 2 + 

x x<y 



ao + Y a x + Y a *y + " 

x x<y 



1 . 



(13) 



(14) 



Because of the constraint ([14]), the minimum value of ([13]) is achieved when all the coefficients 
are equal. Since there are l + (^) + -- -+ ( J jf) coefficients, the inequality (|10D is established. 

Suppose we are given an algorithm that meets condition (§) for j = 1, . . . , D. Then by 
the above lemma, 
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J2J2\Q jr (F(l),...,F(N)) 

r=l F 



2 N p 



> 



Summing over j using (|?p yields 

j F 



> 



L>2> 



(15) 



i +a)+-+a) 



(16) 



For each F, the sum on j gives 1 since |^) = 1. Therefore the lefthand side of fllBD is 2 N 
and (ET) follows. 



III. EXAMPLES 



0. If k = N, all 2 N functions can be distinguished classically and therefore quantum 
mechanically. In this case @ becomes 



2"=D<l+(?) + (?) + -+(Z)=2". 



(17) 



1. For fc = 1, ifA^ = 2 n — 1 there are N + 1 functions that can be distinguished |5) so the 
bound (U) is best possible. The functions can be written as 



Ux) = (-ir 



(18) 



with x G {1, . . . , iV} and a G {0, 1, ... , iV} and a • x — J2i a i x i where a x • • • a n and X\ - ■ -x n 
are the binary representations of a and x. To see how these can be distinguished we work 
in a Hilbert space with basis {\x, q)}, x = 1, . . . , N and q = ±1, where a quantum query is 
defined as in (151) and the work bits have been suppressed. We define 



and 



so x = 0, 1, 

have 



and in particular, 



\x) = + 1 ) ~ I s ' x = !' 



|0) = ^={|1,+1) + |1,-1>}, 



N 



(19) 



(20) 



N, is an orthonormal set. Now by (|[), if we define F(0) to be +1, we 
F\x) = F(x)\x) x = 0,l,...,iV (21) 



f a \x) = (-iy x \x) x = 0,l,...,N 



(22) 



Now let 
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N 



\s) 



J- n 



(23) 



and observe that the iV + 1 states f a \ s) are orthogonal for a = 0, 1, 



AT. 



2. In an algorithm is presented that distinguishes all 2 N functions in k calls with 
probability (l + (^) + -- -+ (^))/2 Ar . With this value of p, and D — 2 N , the bound (§ 
becomes an equality. Furthermore, (f|) shows that this algorithm is best possible. 

3. Nowhere in this paper have we exploited the fact that for an algorithm that succeeds 



with probability 1, it must be the case that 



for £ ^ j. With this additional 



constraint it can be shown that for N = 3, no set of 7 = 1 + (i) + Q) functions can be 
distinguished with 2 quantum queries. Thus for N = 3 and k = 2 the bound @ is not tight. 
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